Host-side third party token validation

remoting/host/url_fetcher_token_validator_factory.h

+// Copyright 2013 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef REMOTING_HOST_URL_FETCHER_TOKEN_VALIDATOR_FACTORY_H_
+#define REMOTING_HOST_URL_FETCHER_TOKEN_VALIDATOR_FACTORY_H_
+
+#include <set>
+#include <string>
+
+#include "base/basictypes.h"
+#include "net/url_request/url_request_context_getter.h"
+#include "remoting/protocol/third_party_host_authenticator.h"
+
+namespace remoting {
+
+// This class dispenses |TokenValidator| implementations that use a UrlFetcher
+// to contact a |token_validation_url| and exchange the |token| for a
+// |shared_secret|.
+class UrlFetcherTokenValidatorFactory
+    : public protocol::ThirdPartyHostAuthenticator::TokenValidatorFactory {
+ public:
+  // Creates a new factory. |token_url| and |token_validation_url| are the
+  // third party authentication service URLs, obtained via policy. |key_pair_|
+  // is used by the host to authenticate with the service by signing the token.
+  UrlFetcherTokenValidatorFactory(
+      scoped_refptr<net::URLRequestContextGetter> request_context_getter);
+
+  virtual ~UrlFetcherTokenValidatorFactory();
+
+  // TokenValidatorFactory interface.
+  virtual scoped_ptr<protocol::ThirdPartyHostAuthenticator::TokenValidator>
+      CreateTokenValidator(const GURL& token_url,
+                           const GURL& token_validation_url,
+                           scoped_refptr<RsaKeyPair> key_pair,
+                           const std::string& local_jid,
+                           const std::string& remote_jid) OVERRIDE;
+
+ private:
+  scoped_refptr<net::URLRequestContextGetter> request_context_getter_;
+  DISALLOW_COPY_AND_ASSIGN(UrlFetcherTokenValidatorFactory);
+};
+
+}  // namespace remoting
+
+#endif  // REMOTING_HOST_URL_FETCHER_TOKEN_VALIDATOR_FACTORY_H_